CVE-2026-19722

6.6 Moyenne

Publiée le 30/08/2026 à 09:17 · Modifiée le 03/09/2026 à 18:17 · Analyse NVD reportée · Source : contact@wpscan.com

Description

The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.133 does not validate the destination of files extracted from a backup package during restoration, allowing high privilege users such as administrators to write arbitrary files outside the intended restore directory, which can lead to code execution.

Traduire en français

Produits concernés

Unknown WPvivid — Backup, Migration & Staging

Scores CVSS

Version	Score	Source	Vecteur
3.1	6.6 Moyenne	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L`

Faiblesses (CWE)

CWE-22

Références

https://wpscan.com/vulnerability/a61974fc-d9d6-4aee-a624-fc0a6e7b940b/

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories